Executive brief
Windows Virtualization-Based Security (VBS) is a Microsoft security feature that isolates sensitive system processes in a protected environment. An authorized attacker can exploit an untrusted pointer dereference vulnerability in VBS Enclaves to gain elevated privileges on affected systems, potentially compromising the security isolation that VBS is designed to provide.
Technical details
The vulnerability is a untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave. An authorized attacker with local system access can exploit this flaw to execute arbitrary code with elevated privileges by dereferencing a malicious pointer within the enclave environment. The attack requires prior authentication/system access. No patch availability information is provided in the advisory details. The vulnerability affects the core VBS security isolation mechanism.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed